x86: Make "spec-ctrl=no" a global disable of all mitigations
authorJan Beulich <JBeulich@suse.com>
Mon, 13 Aug 2018 11:07:23 +0000 (05:07 -0600)
committerAndrew Cooper <andrew.cooper3@citrix.com>
Tue, 14 Aug 2018 15:56:47 +0000 (16:56 +0100)
commitd8800a82c3840b06b17672eddee4878bbfdacc6d
tree8e68cdd7bf6ca3a5b94e6c9254e783e65808ce9a
parent3bd36952dab60290f33d6791070b57920e10754b
x86: Make "spec-ctrl=no" a global disable of all mitigations

In order to have a simple and easy to remember means to suppress all the
more or less recent workarounds for hardware vulnerabilities, force
settings not controlled by "spec-ctrl=" also to their original defaults,
unless they've been forced to specific values already by earlier command
line options.

This is part of XSA-273.

Signed-off-by: Jan Beulich <jbeulich@suse.com>
Acked-by: Andrew Cooper <andrew.cooper3@citrix.com>
docs/misc/xen-command-line.markdown
xen/arch/x86/spec_ctrl.c